
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35392e302f32342d3234203d3e20313332363337.roa
File: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (raw, json)
Hash identifier: +vElMuoXueIlORLkNX9hNN9LTELx3Cm8ZNhxGm0p8LM=
Subject key identifier: DB:6A:F2:3F:72:0F:18:CF:D8:37:AA:39:7C:49:39:4A:F6:2D:50:0F
Certificate issuer: /CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835
Certificate serial: 30A14035B1542CE389B0A97D020D2C3FB2CF3153
Authority key identifier: 2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35392e302f32342d3234203d3e20313332363337.roa
Signing time: Sun 03 May 2026 02:22:35 +0000
ROA not before: Sun 03 May 2026 02:17:35 +0000
ROA not after: Sun 02 May 2027 02:22:35 +0000
asID: 132637
IP address blocks: 103.19.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl
rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a1:40:35:b1:54:2c:e3:89:b0:a9:7d:02:0d:2c:3f:b2:cf:31:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835
Validity
Not Before: May 3 02:17:35 2026 GMT
Not After : May 2 02:22:35 2027 GMT
Subject: CN=DB6AF23F720F18CFD837AA397C49394AF62D500F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:c9:00:68:8f:d2:34:c9:d4:89:5d:a0:91:
ab:da:28:7b:39:9a:52:36:90:51:95:d7:a8:61:cc:
76:4e:c4:ae:aa:a8:5a:b5:76:0f:03:98:90:f5:66:
f8:98:63:d9:ff:8d:f5:c0:69:27:e2:9d:45:de:4f:
e8:27:1d:5a:c3:81:68:00:53:91:ef:e5:5f:72:88:
9a:7f:31:e1:ad:9f:be:d9:a7:83:95:df:a3:89:84:
c7:fb:74:8f:42:29:cf:bf:39:4a:09:a3:b3:1e:ac:
b1:79:7a:74:39:6d:4c:89:2b:5f:53:a5:26:07:d1:
dd:4a:f2:d9:34:ee:d8:a7:37:fb:c6:5a:57:f7:07:
6c:7e:dc:0c:9a:2c:af:9f:ff:b6:ff:04:4a:e4:1f:
7c:03:88:23:07:3a:68:2d:a5:a7:9e:ec:28:07:8c:
b7:de:e9:e0:ac:91:bb:17:bd:9d:4b:97:ae:f8:ea:
4d:53:7c:be:0b:8b:70:40:01:99:35:73:c6:62:ff:
bf:ae:d9:2b:fd:e2:35:2d:92:90:92:87:e7:9e:85:
ab:5d:47:50:66:49:d8:6a:ef:e1:eb:4e:e8:33:db:
88:fe:db:24:9c:62:8e:8a:41:ea:dd:e0:50:d6:b7:
0e:25:b1:9a:89:40:43:09:4a:04:77:99:15:06:5b:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:F2:3F:72:0F:18:CF:D8:37:AA:39:7C:49:39:4A:F6:2D:50:0F
X509v3 Authority Key Identifier:
keyid:2D:4E:F7:6F:F5:F1:DE:08:B9:FB:7C:AE:D4:9A:F7:AD:4C:60:18:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D4EF76FF5F1DE08B9FB7CAED49AF7AD4C601835.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35392e302f32342d3234203d3e20313332363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.19.59.0/24
Signature Algorithm: sha256WithRSAEncryption
35:96:b4:ca:cb:d1:e1:69:f7:c5:48:54:0d:fb:1c:44:e4:39:
cc:16:9a:13:a5:ca:a0:00:0f:bc:81:55:29:b3:e6:fe:20:9b:
79:6a:4a:4d:7c:08:20:b7:1b:bd:76:3a:02:70:33:86:bf:6a:
b1:c0:28:99:4e:e4:47:bb:aa:05:c0:82:59:0d:c9:fe:a9:6f:
80:f6:bb:27:09:b1:16:11:09:e6:be:78:38:58:76:00:5d:35:
51:e9:1b:32:af:5a:14:8f:e8:d9:fb:cd:b5:05:7e:8a:00:e6:
57:75:c6:82:b1:29:e7:8f:2a:7c:c4:94:60:ee:29:2b:3f:10:
2d:97:99:db:2b:25:67:bd:4e:12:99:2c:d4:77:f9:3b:4d:16:
0e:17:c4:36:7f:88:00:e4:89:f6:a2:40:c1:a2:73:18:d6:cd:
4b:f5:64:08:05:b8:9c:56:1e:cf:9a:72:59:8a:5c:b6:c0:98:
b3:5d:76:44:e3:e1:0d:23:68:4c:db:49:d0:69:58:cb:24:0a:
e4:1e:03:33:8f:ad:e2:a4:6a:ae:e8:b7:6c:58:12:64:5a:7d:
33:52:fe:da:8e:e7:85:23:9b:39:00:57:cd:a2:e8:1a:c1:0b:
6f:96:ef:37:4b:f4:02:76:57:94:8e:e8:8d:4d:51:e3:3f:9f:
ee:89:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:25 2026 by rpki-client